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Abstract: Besides achieving secure communication between two spatially-separated parties, 
another important issue in modem cryptography is related to secure communication in 
time, i.e., the possibility to confidentially store information on a memory for later retrieval. 
Here we explore this possibility in the setting of quantum reading, which exploits quantum 
entanglement to efficiently read data from a memory whereas classical strategies (e.g., based 
on coherent states or their mixtures) cannot retrieve any information. From this point of 
view, the technique of quantum reading can provide a new form of technological security for 
data storage. 
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1. Introduction 

Quantum cryptography [1,2] aims to realize a completely unbreakable scheme for the distribution of 
a secret key between two remote parties, usually called Alice and Bob. Indeed quantum key distribution 
(QKD) relies its security on one of the the most fundamental physical laws, the uncertainty principle, 
which is actively exploited for detecting and overcoming the presence of a malicious eavesdropper, 
usually called Eve. In this scenario, an important role is also played by quantum entanglement [3], 
which can be exploited to make QKD protocols device-independent, i.e., more robust to practical 
flaws (e.g., in the detectors) which may potentially be exploited by Eve. Very recently, quantum 
discord [4] (see Ref. [5] for its computation with Gaussian states) has also been identified as a useful 
resource for device-dependent QKD with trusted noise [6], e.g., in scenarios such as measurement-device 
independent QKD [7-10]. 
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In this preliminary study, we investigate a different but still important problem: The eonfidential 
storage of information on a physieal deviee, sueh as an optieal memory. It has been reeently proven that 
quantum entanglement ean provide an advantage in the readout of elassieal data from optieal memories, 
espeeially in the low-energy regime, i.e., when a few photons are irradiated over the memory eells. This 
approaeh is known as quantum reading [11] (see also follow-up papers [12-23]), a notable applieation 
of quantum ehannel diserimination to a praetieal task as the memory readout. From this point of view, 
another well-known protoeol is quantum illumination, whieh aims at improving target deteetion [25-31], 
and has been reeently extended to its most natural domain, the mierowaves [32]. 

Here we show how the performanee advantage given by quantum reading ean be exploited to 
eompletely hide elassieal information in optieal memories. The strategy is to design a photo-degradable 
optieal memory whose eells have very elose refleetivities (eaeh refleetivity eneoding a bit-value). 
Beeause of the photodegrable effeets, eaeh eell ean only be read with a limited number of photons. In 
these low-energy eonditions, we find that only well-tailored quantum sourees (in partieular, entangled) 
are able to diseriminate two very elose refleetivities and, therefore, retrieve the information stored in the 
eell. Speeifieally, we derive a simple analytieal formula whieh relates the refleetivities of the memory 
eell with the mean number of photons to be employed by the quantum souree. 

This approaeh would provide a layer of teehnologieal seeurity to the stored data, in the sense that only 
an advaneed laboratory equipped with quantum-eorrelated sourees would be able to read the information, 
whereas any other standard optieal reader based on elassieal states, sueh as eoherent states or even 
thermal states, ean only extraet a negligible number of bits. 

The paper is organized as follows. In See. 2, we briefly review the basie setup of quantum reading 
and we diseuss the performanees aehievable by quantum entanglement and elassieal (eoherent) states. 
Then, in See. 3 we show how to design memories whieh are not aeeessible to elassieal methods. Finally, 
See. 4 is for eonelusions. 

2. Basic setup for quantum reading 

For our purpose we eonsider the simplest version of quantum reading, eonsidering only ideal optieal 
memories, i.e., with high refleetivities, and negleeting deeoherenee effeets (see Ref. [11] for more 
advaneed models). Eaeh memory eell is assumed to be in one of two hypotheses: Non-unit refleetivity 
To := r < 1 (eneoding bit-value 0) or unit refleetivity ri = 1 (eneoding bit-value 1). Mathematieally, 
this is equivalent to distinguish between a lossy ehannel Sr whose loss parameter is the refleetivity r < 1 
and an identity ehannel X. 

In symmetrie quantum hypothesis testing, these two hypotheses have the same eost, so that we aim 
to optimize the mean error probability. In other words, we need to minimize p := p(l|0)po + p(0|l)pi, 
where po and pi are the a priori probabilities of the two hypotheses, while p(l|0) is the probability 
of a false positive and p(0|l) is the probability of a false negative. For simplieity, we eonsider here 
equiprobable hypotheses, i.e., po = pi = 1/2, whieh means that a bit of information is stored per 
eell. The amount of information whieh is retrieved in the readout proeess is therefore given by /read(p) = 
1 — H{p), where Ff(p) = — plog 2 p—(1—p) log 2 (l—p) is the binary formula of the Shannon entropy [33]. 
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2.1. Classical Benchmark 


To distinguish between the two hypotheses Aliee exploits an input souree of light (a transmitter) and 
an output deteetion seheme (a reeeiver). In the elassieal reading setup, the transmitter eonsists of a single 
bosonie mode, the signal (S'), whieh is prepared in a eoherent state la) sent to the memory eell. At the 
output, the reeeiver is typieally a photodeteetor eounting the number of photons refleeted, followed by a 
digital proeessing based on a elassieal hypothesis test. The performanee of this reeeiver ean be bounded 
by eonsidering an optimal quantum measurement, eonstrueted from the Helstrom matrix po — Pi of the 
two possible output states po = Iv^a) (v^^l and pi = |a) (a|. 

The minimum error probability is given by the Helstrom bound [34] whieh is here very simple to 
eompute sinee the two states are pure. In faet, for two arbitrary pure states |<po) and |<pi), the Helstrom 
bounds reads 


p = 


where the traee distanee [3] D is determined by the fidelity 

D{\po ), |(pi)) = \/l - F(\po) , |(pi)), 

Fi\Vo) Avi)) = Wi)? ■ 


( 1 ) 

( 2 ) 

(3) 


In our speeifie ease, we have [2] 

F{\y/ra) , |a)) = exp |a — \/ra|^j = exp[—n(l — \/r)^], (4) 

where h = \a\ is the mean number of photons of the input eoherent state. As a result, we aehieve the 
following Helstrom bound for the eoherent state transmitter 

_ 1 - 

Pcoh(?^,r) = - - -, (5) 

whieh is therefore able to read an average of = /read(Pciass) bits per eell. 


2.2. Quantum Transmitter 


In the quantum reading setup, we eonsider a transmitter eomposed of two entangled modes, that we 
eall signal (S') and referenee (K). This is taken to be an Einstein-Podolsky-Rosen (EPR) state, also 
known as a two-mode squeezed vaeuum state [2]. An EPR state is a zero-mean pure Gaussian state 
\t) SR eovarianee matrix (CM) 


V(p) 


pi V^p2 - IZ \ Z := diag(l,-1), 
^/p4^Z pi y’ I := diag(l, 1), 


( 6 ) 


where p > 1 quantifies both the mean number of thermal photons in eaeh mode, given by n = (p —1)/2, 
and the amount of entanglement between the signal and referenee modes [2]. 

The signal mode, with n mean photons, is sent to read the memory eell and its refleetion S' is 
eombined with the referenee mode in an optimal quantum measurement. Given the state psR = \p)sr {p\ 
of the input modes S and R, we get two possible states 


(To = (Sr<»I)(,pSR), 

(Ti = {X®X) (psr) = PSR, 


(7) 

( 8 ) 
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for the output modes S' and R at the reeeiver. One is just the input EPR state, while the other state cxo is 
a mixed Gaussian state with CM 


Vo(/i,r) 


(r/r + 1 — r)I \/r{p?‘ — 1)Z 
- 1)Z /il 


(9) 


The minimum mean error probability is given by the Helstrom bound ^quantum = [1 ~ -D((To, cri)]/2, 
where D(ao, ai) is the traee distanee between ao and ai. The Helstrom bound is diffieult to eompute 
when one or both the output states are mixed. For this reason, we resort to an upper-bound, known as 
quantum Chernoff bound (QCB) [35-37]. This ean be written as 

pjfantum — ?, C := mf C'„ (10) 

2 S6(0,l) 


where Cg ■= Tr(crocrq“^) is the s-overlap between the two states. In the speeifie ease where one of the 
output states is pure cxi = |</ 9 ) ( 93 I, we may write C = F, using the quantum fidelity F = {ip\ao\ip). For 
zero-mean Gaussian states, this fidelity ean easily be eomputed in terms of their CMs [38,39]. In faet, 
we have 


F = 


^/det[V{p) -f Vo(/i,r)] [1 + p + ^/r{l - p)y 


= (1 -f n -f n^/r^ 


-2 


( 11 ) 


As a result, the mean error probability assoeiated with this quantum transmitter is upperbounded by the 
QCB as follows 


Pquantum ^ Pquantum ~ 


-QCB _ jl + n + n^-) 


-2 


( 12 ) 


Thus, the FPR transmitter is able to read at least = 4ead(Pqu^ntum) bits per eell. 


3. Data secured by quantum reading 

We ean eompare the readout performanees of the two transmitters by eonsidering the information gain 
A := /jgad"^ — Iread- It® positivity means that quantum reading outperforms the elassieal readout strategy. 
In partieular, for A ~ 1 bit per eell we have that the EPR transmitter reads all data, while the elassieal 
transmitter is not able to retrieve any information. Here we aim to exploit this feature to make the data 
storage seeure in absenee of entanglement (and, more generally, quantum resourees). As we ean see 
from Fig. 1 , the value of the gain A is elose to the maximum value of 1 bit per eell when the memory eell 
is eharaeterized by very high refieetivities, i.e., r ~ 1. In partieular, the good region where A > 0.95 is 
partieularly evident at low photon numbers, while it tends to shrink towards r = 1 for inereasing energy. 


We now diseuss how we ean exploit this advantage of quantum reading for designing a seeure elassieal 
memory. Fet us expand the information quantities and at the leading order in (1 — r) ~ 0. 
We find 


rclass ^ 
read — 


n(l — r)^ 


y-quant ^ 
■^read 


n^(l — r)^ 


In 256 ’ ln4 ■ 

As we ean see, at high refieetivities, there is a different behaviour of these quantities in the mean number 

of photons n. In partieular, we may write 


/-quant ^ - /-class 

■'read — ^"'-'read 


( 14 ) 
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Figure 1. We plot A(n, r) in the high-reflectivity range 0.99 < r < 1 and wide range of n 
up to 5 X 10^. We see how the EPR transmitter is superior for r ~ 1, where A becomes close 
to 1 bit per cell. 

According to Eq. (13), a non-trivial difference between and arises by imposing the condition 

1 — r = n~^ . (15) 


Indeed this leads to the following behaviour for large n 


rclass 

■^read 


n In 256 


—>■ 0 , 


jquant ^ 
■^read 


In(^) 


71n(f) 


In 512 


~ 0.235. 


(16) 


We can see that only quantum reading enables to retrieve non-zero information from the memory 
(combining this performance with suitable error correcting codes would enable us to achieve a complete 
readout of the memory). In the following Eig. 2, we show the behaviour of the two information quantities 
and /read"' in terms of the mean photon number n and assuming the condition of Eq. (15). 

We can see that, at any fixed energy n irradiated over the memory cell, there is a memory with 
reflectivity r satisfying Eq. (15) which is readable by using a quantum transmitter with signal energy n 
but unreadable by a classical transmitter with the same irradiated energy n. More precisely, any classical 
transmitter with energy up to n is inefficient. In fact, let us fix some value hmax and consider a memory 
with 1 — r = then the performance of all classical transmitters with signal energy n < hmax is 
shown in Eig. 3. We see that the optimal classical transmitter is that with the maximal energy hmax as 
clearly expected from the monotonic expression in Eq. (5). 

Thus, if we construct a theoretical memory which can be irradiated with at most hmax photons per cell 
(otherwise data is lost, e.g., due to photodegrable effects) and having reflectivity r satisfying Eq. (15), 
then this will be unreadable by any classical transmitter based on coherent states while its data can be 
retrieved by a quantum transmitter with signal energy ~ hmax- 
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Figure 2. We plot (lower eurve) and (upper eurve) versus the mean photon number 
n > 1. We assume a memory with refleetivity r satisfying the eondition of Eq. (15). 




Figure 3. We plot the information quantity in log-seale for n < nmax- We consider the 
readout of a memory with 1 — r = n'^^. Here we consider the numerical value ffmax = 1000 
but the behaviour is generic. 
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Note that in general, we ean design a memory with refleetivity r sueh that 

1 — r = cn~^, (17) 

for some eonstant c. For large n, we have —)■ 0, while tends to a eonstant < 1 whieh depends 

on c. For instanee, we have 7^“™' —)■ 0.895 for c = 0.1, and —)■ 0.997 for c = 0.01. In the following 

Fig. 4, we show the behaviour of the two information quantities and assuming the eondition 
of Eq. (17) with c = 0.1. We see how the memories remains unreadable by elassieal means while the 
peformanee of quantum reading approaehes 1 bit per eell. 
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Figure 4. We plot the information quantities (lower eurve) and (upper eurve) 
versus the mean photon number n > 1. We eonsider memories with refleetivity r satisfying 
Eq. (17) with c = 0.1. 





^ _ 



4. Conclusion 

In this preliminary study on the eryptographie aspeets of quantum reading, we have shown how it 
is possible to eonstruet elassieal memories whieh eannot be read by elassieal means, namely eoherent 
states (and mixtures of eoherent states, by invoking the same eonvexity arguments of Ref. [26]) but still 
they ean be read using quantum entanglement. In partieular, we have eonsidered an EPR state and we 
have eonneeted the mean number of photons to be employed by this quantum souree with the refleetivies 
to be used in the memory eells, see Eq. (15) and also its generalization in Eq. (17). Note that other 
non-elassieal states may also provide non-trivial advantages with respeet to eoherent states and their 
mixtures. In general, the seeurity provided by the seheme relies on the teehnologieal differenee between 
two types of labs, one limited to elassieal sourees and the other able to aeeess quantum features, sueh as 
entanglement or squeezing. 

It is interesting to diseuss the eonneetions between our seheme of data-hiding by quantum reading and 
the traditional teehnique of quantum data hiding [40,41]. The latter is about to store elassieal information 
into entangled states, so that it ean only be retrieved by joint measurements. It is elearly an applieation 
of quantum state diserimination. By eontrast, data-hiding by quantum reading is related to the problem 
of quantum ehannel diserimination. Classieal data is stored in a ehannel (not a state) and quantum 
entanglement is used as an input resouree to be proeessed by the ehannel. This is a erueial differenee. 
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also for practical purposes, since data stored in a classical memory does not decohere (like the entangled 
states typically prepared in quantum data hiding), and quantum entanglement is used a resource on 
demand, which is needed only for the readout of the information (not for the storage process). 

Note that our study can be extended in several ways. We have only considered ideal memories 
where the cells are addressed individually and have very high reflectivities (in particular, we have 
assumed unit reflectivity for one of the two bit values stored in the cell). There is no inclusion of 
additional noise sources in the model, e.g., coming from stray photons scattered during the readout 
process, neither analysis of diffraction or other optical effects. Finally, we have also assumed that high 
values of entanglement can be generated. While this is possible theoretically, it is very hard to achieve 
experimentally. This would not be a problem if we were able to construct memories which are extremely 
photo-sensitive, so that that the maximum values of tolerable energies are of the order of hmax ^ 10 
photons per cell. 
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